Application no.: 09/629,408 
Office Action dated 03/01/2004 
Response dated 08/09/2006 



Atty. Docket No.: VANBEN.HEREUR.PT1 
Customer No.: 24943 



REMARKS 

L STATUS OF THE CLAIMS 

Claims 1-32 are pending in the present Application. By the present amendment, 
claims 1, 3, 12, 15, 16, 19 and 26 have been amended. 

In the Office Action, Claims 12 and 16 are rejected under 35 U.S.C. § 1 12, second 
paragraph (hereinafter, "Section 1 12, Par. 2") as being indefinite for failing to particularly 
point out and distinctly claim the subject matter which applicant regards as the invention. 

Claims 1-2 and 12-13 are rejected under 35 U.S.C. § 102(e) (hereinafter, "Section 
102(e)") as being anticipated by Short et al. (U.S. Pat. No. 6,636,894, hereinafter, "Short"). 

Claims 3-5 and 1 1 are rejected under 35 U.S.C. § 103(a) (hereinafter, "Section 
103(a)") as being unpatentable over Short in view of Mishkin (U.S. Pat. No. 6,377,781). 

Claims 6-8 are rejected under Section 103(a) as being unpatentable over Short in 
view of Mishkin as applied to claim 3, in further view of Levy (U.S. Pat. No. 6,466,981). 

Claims 9-10 are rejected under Section 103(a) as being unpatentable over Short in 
view of Mishkin in view of Levy as appUed to claim 6 above, in further view of Lin (U.S. 
Pat. No. 6,285,683). 

Claim 14 is rejected under Section 103(a) as being unpatentable over Short in view of 
Reiche (U.S. Pat. No. 6,092,196). 

Claims 15 and 18 are rejected under Section 103(a) as being unpatentable over Short 
in view of Sitaraman et al. (U.S. Pat. No. 6,212,561, hereinafter, "Sitaraman"). 

Claims 16-17 are rejected under Section 103(a) as being unpatentable over Short in 
view of Sitaraman in further view of Levy. 

Claims 19-25 are rejected under Section 103(a) as being unpatentable over Short in 
view of Levy in view of Guthrie (U.S. Pat. No. 6,161,185), in further view of Sitaraman. 
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Claims 26-32 are rejected under Section 103(a) as being unpatentable over Short in 
view of Levy in view of Guthrie in view of Sitaraman as applied to claim 19 above, in further 
view of Mishkin. 

Claims 28 is rejected under Section 103(a) as being unpatentable over Short in view 
of Levy in view of Guthrie in view of Sitaraman in view of Mishkin as applied to claim 26 
above, in further view of Lin. 

Claim 29 is rejected under Section 103(a) as being unpatentable over Short in view of 
Levy in view of Guthrie in view of Sitaraman in view of Mishkin as applied to claim 26 
above, in further of Guthrie. 

Applicant respectfully traverses all rejections and requests reconsideration. 

II. REJECTIONS UNDER SECTION 1 12, PAR. 2 

Claims 12 and 16 are rejected for being indefinite under Section 1 12, Par. 2. 

First, claim 12 is rejected due to allegedly insufficient antecedent basis for the 
limitation "said hidden reserved field and authentication information fi-om said solicited data 
packet." Claim 12 has been clarified by amendment to add "extracting." It is noted that both 
"said hidden reserved field" and "said solicited packet" have originally been introduced in 
line 2 of claim 12. 

Second, claim 16 is rejected due to due to insufficient antecedent basis for the 
limitation "said second identification keyword." Claim 16 has been amended to remove 
"said second" and add "an." Therefore, it is respectfiiUy requested that the rejections of 
claims 12 and 16 under Section 1 12, Par. 2 be withdravra. 
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III. REJECTIONS UNDER SECTION 1 02(e), SHORT 

Claims 1-2 and 12-13 are rejected under Section 102(e). Applicant respectfully 
traverses the Examiner's contention that Short anticipates claims 1-2 and 12-13 for the 
reasons stated below: 

Applicant's claim 1 has been amended and not ALL of the elements of amended 
claim 1 are taught in Short. 

First, Short does not disclose the claim elements "and all out-going data packets 
originated from unauthorized access devices being inspected... for checking if a determined 
target destination Internet website matches a predetermined authentication server website and 
in response to said checking forwarding a corresponding out-going data packet to said 
predetermined authentication server." (emphasis added). There is no support provided in the 
Office Action that identifies such limitation in Short. Applicant respectfully requests 
Examiner to point out where in Short, such limitation is taught or suggested, as no support 
was provided on page 4 of the Office Action. 

Moreover, in Short, a user is redirected to a portal page whether or not the user is 
authorized access to the network (column 8, lines 3 1-42, emphasis added). The redirecting 
requires a mandatory portal page. Per the Examiner's statement in the Office Action, if the 
user is unauthorized, the user is forwarded from the portal page to a login page (page 4, 
lines 10-11 of the Office Action, emphasis added). Applicant respectfully contends that the 
"login page" of Short does not teach the "forwarding the out-going data packet to said 
redirection server" of Applicant's claim 1 . A login web page is not the equivalent of a 
redirection server as the login page can reside on the same server as the portal page. As such 
there is no teaching of a forwarding to a separate redirection server. Therefore, Short dose 
not disclose the elements of amended claim 1 . Short fails to teach both forwarding the out- 
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going data packet to the predetermined authentication server for matches and forwarding the 
out-going data packet to the redirection server for non matches. 

Second, the cited language of column 12, lines 61-63 in Short does not teach the last 
element, "all out-going data packets to the Internet gain access to the Internet irrespective of 
whether their respective originator access devices are authorized for Internet access." 
(emphasis added). Short discloses gaining access to a specific login page on a specific 
webserver. On the other hand, the present invention recites gaining access to "the Intemet," 
which signals a broad range of accessibility. A device can have access to a limited login 
page, as in Short, and still be restricted to the rest of the Intemet. 

Therefore, Short only teaches access to a limited login page and fails to teach the 
required element of claim 1 of "all out-going data packets to the Intemet gain access to the 
Internet...". 

Dependent claims 2, 12 and 13 include all limitations of their respective base claim 1. 
Accordingly, Applicant respectfully submits that claims 2, 12 and 13 are all allowable for at 
least the same reasons as base claim 1 . 

Furthermore, unlike Claim 2, Short does not teach that a "redirection server responds 
to a received data packet from an unauthorized originator access device by sending said 
originator access device a message instructing it to connect to said predetermined 
authentication server." Rather, it teaches that the message instructs the device to connect to a 
login page. A login web page is different from a separate "predetermined authentication 
server", and the connection to each is different. Connecting to a web page requires a 
connection to a web server to already be established. Furthermore, connecting to a web page 
and connecting to a server cannot be considered equivalent. In Short, the login page that the 
device is redirected to might exist on the exact same server that the portal page is in. In such 
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an instance, there is not a redirection to a different server at all, as such Short cannot 
anticipate the requirements of claim 2. 

In addition. Applicant's claim 12 has been amended, and not ALL of the elements of 
amended claim 12 are taught in Short. Unlike claim 12, Short does not teach that an 
authentication server "extracting the contents of said hidden reserved field comprising 
embedded IDs generated fi-om a hardware host address of a client device and a hardware host 
address access point; and authentication information from said solicited data packet." Short 
does not teach that the user and location are identified by extracting the contents of the 
hidden fields. Applicant respectfully disagrees that it can be inferred that the user and 
location are identified by extracting the contents of the hidden fields as Short makes no 
suggestion to show such limitation. It could be that in Short, the user name and password is 
looked at to identify the user (col. 12, lines 12-24). Neither is the amended language of claim 
12 taught or suggested by Short. 

Therefore, Applicant respectfully requests withdrawal of the rejection of claims 2, 12 
and 13 under Section 102(e). 

VI. REJECTIONS UNDER SECTION 1 03(a) 
A. SHORT IN VIEW OF MISHKIN 

Claims 3-5 and 1 1 were rejected under Section 103(a) as being unpatentable over 
Short in view of Mishkin. 

Dependent claims 3-5 and 1 1 include all limitations of their respective base claim 1 . 
Accordingly, Applicant respectfully submits that claims 3-5 and 1 1 are all allowable for at 
least the same reasons described above for base claim 1, as not all the elements of these 
claims are taught as required to establish a prima facie case of obviousness. 
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Additionally, Applicant's claim 3 has been amended, and not ALL of the elements of 
amended claim 3 are taught in Short and Mishkin. Thus, the Examiner has not established a 
prima facie case of obviousness using Short and Mishkin for at least the reasons stated 
below. 

The hidden field of Mishkin is not the equivalent of the hidden reserved field of claim 
3. Per section 2141.01(a) of the MPEP, references cited under Section 103 must be 
analogous prior art. "The reference must either be in the field of applicant's endeavor or, if 
not, then be reasonably pertinent to the particular problem with which the inventor was 
concerned." In Mishkin, the students are required to know the contents of the hidden field. 
Indeed, they must enter the quiz ID number in order to select a quiz to take (col. 7, lines 58- 
66). Therefore, the hidden field is not hidden so as to be a completely invisible part of the 
system. On the other hand, in the present invention of claim 3, the hidden reserved field are 
hidden from the users. Users do not know the content of their computer in order for the 
system to work. Because of the different nature of hidden fields in between Mishkin and the 
present invention, Mishkin was neither in the field of applicant's endeavor nor, reasonably 
pertinent to the particular problem with which the inventor was concerned. As such, there is 
no motivation to combine a reference which clearly makes a field available for entry by the 
user, in order to obtain the "hidden reserved field" of claim 3 in which the field is truly 
"hidden" from the user. 

Therefore, Applicant requests withdrawal of the rejection of claims 3-5 and 1 1 under 
Section 103(a). 
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B. SHORT IN VIEW OF MISHKIN, IN FURTHER VIEW OF LEVY 

Claims 6-8 were rejected under Section 103(a) as being unpatentable over Short in 
view of Mishkin as applied to claim 3, in further view of Levy. 

Dependent claims 6-8 include all limitations of their base claim 3 and 1 . 
Accordingly, Applicant respectfully submits that claims 6-8 are all allowable for at least the 
same reasons as base claim 3 and 1 . 

Therefore, Applicant requests withdrawal of the rejection of claims 6-8 under Section 

103(a). 

C. SHORT IN VIEW OF MISHKIN IN VIEW OF LEVY, IN FURTHER VIEW OF LIN 

Claims 9 and 10 were rejected under Section 103(a) as being unpatentable over Short 
in view of Mishkin in view of Levy, in further view of Lin. 

Dependent claims 9 and 10 include all limitations of their respective base claims 6, 3 
and 1. Accordingly, Applicant respectfully submits that claims 9 and 10 are all allowable for 
at least the same reasons as base claims 6, 3 and 1 . 

Additionally, Lin does not teach "the hidden reserved field is located a predetermined 
number of bytes away from the first identification keyword." The data objects in Tables 1 
and 2 do not set a certain number of predetermined bytes away from an identification 
keyword. (Col. 10, lines 8-27). The data contained is of n length, meaning there is no 
predetermined limit, and no predetermined way of accessing it through byte location. 

Furthermore, Lin does not teach "the hidden reserved field is immediately preceded 
by the first identification keyword within the out-going data packet" in claim 10. In Lin, the 
ID and state value do not precede the other authentication data. They are stored in the next 
HTML page sent to the browser, and thus do not precede the first identification keyword in 
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the out-going data packet. Accordingly, Lin does not teach or suggest all the claim 
limitations of claims 9 and 10. 

Therefore, Applicant requests withdrawal of the rejection of claims 9 and 10 under 
Section 103(a). 

D. SHORT IN VIEW OF REICHE 

Claim 14 was rejected under Section 103(a) as being unpatentable over Short in view 
of Reiche. 

Dependent claim 14 includes all limitations of its base claim 1. Accordingly, 
Applicant respectfully submits that claim 14 is all allowable for at least the same reasons as 
base claim 1 . 

Additionally, Reiche does not teach that "the authentication server uses a CGI script 
to parse the extracted information from the solicited data packet." Using CGI to interface 
external applications with information servers as described in Reiche is an entirely different 
process from using CGI to parse data from a string of text. Parsing data from data packets is 
an action requiring a specialized subset of CGI commands, and is not a process that involves 
network communication. Therefore, there is no motivation to combine such references to 
obtain the limitations of claim 14. 

Therefore, Applicant requests withdrawal of the rejection of claim 14 under Section 

103(a) 

E. SHORT IN VIEW OF SITARAMAN 

Claims 15 and 18 were rejected under Section 103(a) as being unpatentable over 
Short in view of Sitaraman. 
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Applicant's claim 15 has been amended, and not ALL of the elements of amended 
claim 15 are taught in Short in view of Sitaraman. Additionally, dependent claims 15 and 18 
include all limitations of their respective base claim 1. Accordingly, Applicant respectfully 
submits that claims 15 and 18 are all allowable for at least the same reasons as base claim 1 . 

Additionally, Sitaraman does not teach that the gate keeper responds to the 
verification of the originator access device being registered by sending an unblock message 
to said network monitoring device. An "access-accept" message from an AAA server does 
not teach an "imblock" message from a gate keeper server. The "access-accept" message in 
Sitaraman is sent to the SSG, a gateway device. The "unblock" message of claim 15, 
however, is sent to the controlling device of the network, which is not taught by Sitaraman. 

Therefore, Applicant requests withdrawal of the rejection of claims 15 and 18 under 
Section 103(a). 

F. SHORT IN VIEW OF SITARAMAN, IN FURTHER VIEW OF LEVY 

Claims 16 and 17 were rejected under Section 103(a) as being unpatentable over 

Short in view of Sitaraman as applied to Claim 15, in further view of Levy. 

Dependent claims 16 and 17 include all limitations of their respective base claim 15 

and 1. Accordingly, Applicant respectfully submits that claims 16 and 17 are all allowable 

for at least the same reasons as base claim 15 and 1. Therefore, Applicant requests 

withdrawal of the rejection of claims 16 and 17 under Section 103(a). 
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G. SHORT IN VIEW OF LEVY IN VIEW OF GUTHRIE, IN FURTHER VIEW OF 
SITARAMAN 

Claims 19-25 were rejected under Section 103(a) as being unpatentable over Short in 
view of Levy in view of Guthrie, in ftirther view of Sitaraman. Applicant has amended claim 
1 9 to include further elements of the claims. Claim 19 is an independent claim, upon which 
claims 20-25 directly or indirectly depend. Applicant respectfully submits that Short does 
not anticipate claim 19 for the reasons stated below: 

Short in view of Levy in view of Guthrie, in further view of Sitaraman fails to teach 
or suggest ALL claim limitations as required to establish a prima facie case of obviousness. 

In particular, as mentioned with regard to claim 1, Short fails to teach "monitoring the 
destination address of all out-going messages from said private network to the Internet". 
Short discloses gaining access to a specific login page on a specific webserver. On the other 
hand, the present invention recites gaining access to "the Internet," which signals a broad 
range of accessibility. A device can have access to a limited login page, as in Short, and still 
be restricted to the rest of the Intemet. Therefore, Short only teaches access to a limited login 
page and fails to teach all elements of claim 19. 

Furthermore, none of the references suggest "a network monitoring device for 
scanning the content of any message whose destination is said authentication server to search 
for a first predetermined identification code in said message, said network monitoring device 
responding to the detection of said first predetermined identification code by determining the 
hardware address of the access device that originated the message and generating a second 
identification code based on said hardware address, said network monitoring device fiirther 
inserting said second identification code in said message before forwarding said message." 
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The Examiner noted that Short fails to teach this element (page 15 of the Office Action). 
However, neither do the remaining references. 

Both Levy and Guthrie fail to teach or suggest both a "first predetermined 
identification codes in said message.. .and. ..generating a second identification code based on 
said hardware address, said network monitoring device fiirther inserting said second 
identification code in said message before forwarding". While Levy may teach "an optional 
encryption key". Levy fails to teach the element of "generating a second identification code 
based on said hardware address" (emphasis added). Neither does Guthrie's teaching of a 
user's account ID and previous response provide for the "and generating a second 
identification code based on said hardware address", nor does it make it obvious as the 
references when combined, fail to teach ALL claimed elements as a whole. 

Further, Sitaraman does not teach transmitting "an unblock message from said 
authentication server to said network monitoring device". An "access-accept" packet is not 
equivalent to an "unblock" message. The access-accept packet in Sitaraman is produced by a 
proper password, and sent to the SSG, a gateway device. However, Sitaraman fails to teach 
the limitation of claim 19 that an unblock message is produced by authentication based on 
the user's unique hardware address and transmitted to said network monitoring device. 
As such, the references do not teach all the claim limitation of claim 19. 

Dependent claims 20-25 include all limitations of their respective base claim 19. 
Accordingly, Applicant respectfiilly submits that these dependent claims are all allowable for 
at least the same reasons as in claim 19 and requests withdrawal of the rejection of claims 19- 
25 under Section 103(a). 
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H. SHORT IN VIEW OF LEVY IN VIEW OF GUTHRIE IN VIEW OF SITARAMAN, IN 
FURTHER VIEW OF MISHKIN 

Claims 26-32 were rejected under Section 103(a) as being unpatentable over Short in 
view of Levy in view of Guthrie in view of Sitaraman, in further view of Mishkin. 

Applicant's claim 26 has been amended, and not ALL of the elements of amended 
claim 26 are taught in Short in view of Levy in view of Guthrie in view of Sitaraman, in 
further view of Mishkin. Additionally, dependent claims 26-32 include all limitations of 
their respective base claim 19. Accordingly, Applicant respectfully submits that claims 26- 
32 are all allowable for at least the same reasons as base claim 19, and requests withdrawal of 
the rejection of claims 26-32 under Section 103(a). 

V. CONCLUSION 

The above-discussed remarks are believed to place the present Application in 
condition for allowance. Should the Examiner have any questions regarding the above 
amendments, the Examiner is requested to telephone Applicant's representative at the 
number listed below. 



Respectfully submitted. 





Otto O. Lee (Reg. No.: 37,871) 

Marie G. Capuyan (Reg. No.: 52,695) 
Shinae Kim-Helms (Reg. No. : 57,552) 
Intellectual Property Law Group LLP 



Attorneys for Applicant 
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